Senior Microsoft Sentinel / SIEM Engineer

JR United Kingdom; Swindon; Remote; GBP 70,000 - 85,000; Full time

Job summary

A leading cybersecurity consultancy seeks a Senior Microsoft Sentinel / SIEM Engineer to join their fully remote team. In this high-impact role, you will leverage your expertise in log ingestion and security telemetry to contribute to advanced threat detection efforts, while engaging in continuous learning and collaboration with global Microsoft teams.

Benefits

Direct access to Microsoft Sentinel product teams

Opportunities for career growth and development

Fully remote, flexible work culture

Exposure to multi-cloud detection

Qualifications

• Experience in building Microsoft Sentinel solutions at enterprise level.
• Knowledge of security telemetry across cloud and network layers.
• Ability to work in fast-paced, customer-facing environments.

Responsibilities

• Own and optimise enterprise-wide log onboarding into Microsoft Sentinel.
• Enhance and optimise log ingestion pipelines for precision and cost efficiency.
• Collaborate with teams on detection capabilities and standards.

Skills

Log ingestion at scale

Microsoft Sentinel integration

Scripting skills

Cyber threat detection

Tools

PowerShell

Python

REST APIs

Job description

Social network you want to login/join with:

Senior Microsoft Sentinel / SIEM Engineer, Swindon, Wiltshire

Client: Cloud Decisions

Location: Swindon, Wiltshire, United Kingdom

Job Category: Other

-

EU work permit required: Yes

Job Views:

3

Posted:

31.05.2025

Expiry Date:

15.07.2025

Job Description:

Job Title: Senior Microsoft Sentinel / SIEM Engineer

Salary: To £85,000 + Benefits + Microsoft

Location: Fully Remote, UK

(*Global Microsoft Managed MISA Partner)

+ complex Sentinel Engineering/Integration

The Opportunity

This is a standout opportunity for a Microsoft Sentinel expert to step into a high-impact, technically advanced role with a global security Microsoft powerhouse.

You'll be joining a Microsoft managed global partner, a prominent MISA member, a team with Security MVPs, and a Microsoft Verified Safe XDR Solution Partner, and a trusted Security Depth Partner.

In short, giving you unparalleled access to Microsoft’s security product roadmap, security previews, and frontline support.

You'll work at the forefront of cyber defence, directly contributing to investigations involving nation-state threat actors (including IR, CH, and NK based campaigns) while refining your skills across enterprise-scale log ingestion and customised Sentinel integration engineering. This role offers opportunities to ingest complex logs from various cloud and data sources and to learn continuously on the job.

The Role

You'll own and optimise enterprise-wide log onboarding into Microsoft Sentinel – deploying standard and custom connectors, Function Apps, and parsers to build tailored SIEM solutions that enhance threat detection and response.

• Log ingestion at scale across hybrid and multi-cloud environments
• Enhance custom Function Apps and ingestion pipelines
• Parse, normalise, and optimise log telemetry for precision and cost efficiency
• Partner with IR teams on live attacks – tuning rules based on real threat actor activity
• Collaborate with Microsoft teams to develop cutting-edge detection capabilities
• Contribute to internal knowledge bases and help establish engineering standards

What’s Needed?

• Experience building and integrating complex Microsoft Sentinel solutions at SMC and enterprise levels
• Understanding of security telemetry across identity, endpoint, cloud, and network layers
• Experience in SIEM content development, including KQL, analytics rules, and custom data connectors
• Scripting and engineering skills – Python, PowerShell, APIs, Function Apps
• Background in cyber threat detection, incident response, or DFIR is a plus
• Comfortable working in fast-paced, customer-facing environments

The Technical Skills:

• PowerShell, Python, REST APIs
• Log ingestion and parsing across multiple platforms (Azure, AWS, GCP, M365, Defender, Entra, Copilot, Carbon Black, Okta, Tier 1 Network vendors)
• MITRE ATT&CK, threat detection frameworks, IOC enrichment
• Ability to troubleshoot and resolve issues independently
• Sentinel/Log Analytics Cost Management and Data Optimisation

What’s In It for You?

• Direct access to Microsoft Sentinel product teams and early feature previews
• Involvement in real-world nation-state attack detection
• Opportunities to develop and sharpen Sentinel skills
• Membership in a Microsoft Security elite MISA and Depth partner
• Exposure to multi-cloud detection and advanced security automation
• Fully remote, flexible work culture with global team collaboration
• Recognition, career growth, and development within a respected security consultancy